Hansen offers a method that in other contexts would have seemed reserved for the truly paranoid: use a separate browser to connect to secure sites, setting the browser to load directly to secure URLs rather than click through from an unprotected site.
There are no URLs for remote access sites to remember, the native app gets around any browser inconsistencies, and you can give a key to less technical users.